Socket

Main features: real-time scanning of open source dependencies for 70+ supply chain risk signals (malware, typosquatting, suspicious GitHub stars, telemetry, protestware, Chrome extension permissions, etc.), proactively blocking vulnerabilities and malicious packages. Target users: development and security teams. Core advantages: blocks new malicious packages within minutes, GitHub integration for real-time alerts, 2-click installation, blocks 70+ risk types, accelerates development decisions. Typical use cases: securing software supply chains against malicious dependency infiltration. Pricing: free trial available, enterprise pricing requires contact.